SN 1096: Are we the Krell? - 153 Million Driver's Licenses Leaked
Summary
Steve Gibson and Leo Laporte analyze Microsoft’s record-breaking Patch Tuesday, which fixed nearly 1,000 vulnerabilities, highlighting the challenges enterprises face in deploying such massive updates safely. They contrast this with Anthropic’s Project Glasswing, where only a small fraction of AI-discovered bugs have been confirmed or fixed, suggesting that effective AI security harnesses matter more than raw model power. The episode also covers California’s new data broker deletion laws, the security of driver’s license scans, and uses the sci-fi concept of the Krell to reflect on the risk…
Topics discussed
Sponsorship and show introduction
Weekly recap and upcoming topics
Overview of Microsoft's massive Patch Tuesday
California's DROP data deletion program
Sci-fi references and Picture of the Week
Sponsor: DeleteMe for business privacy
Hugging Face security.txt and OpenAI hack
Analysis of Microsoft's 1,000 security fixes
Zero-day vulnerabilities and patch risks
Steve's home automation and lighting projects
Sponsor: Bitwarden password manager features
Anthropic Project Glasswing AI vulnerability findings
Microsoft's M-Dash AI and agentic workflows
Sponsor: Material cloud workspace security
OpenAI rogue agents and unauthorized internet use
California DROP program update and usage
150 million driver's licenses leaked via IDscan
Sponsor: Think's Canary honeypot and tokens
Upcoming events and community news
Are we the Krell? AI safety and Navier-Stokes
Debate on AI intent and Skynet fears
Show logistics, tools, and sign-off
Listen ad-free on Castria